Privacy policy

• We store your wallet address and the records needed to run your account: sessions, credits and a log of requests (which model, when, what it cost). We do not store your name, email address, IP address or browser details.
• We do not store the text of your prompts or the replies on our servers. Your chat history stays in your browser.
• The model provider receives your conversation but not your wallet address.
• We use no advertising, analytics or tracking cookies, and we do not sell personal data.
• Blockchain transactions, such as staking and auction bids, are public and permanent.

• Wallet address and account status: your address, when we first saw it, the last day you used allwit, its status (active, limited or refused) and how many of its requests our content filter has blocked.
• Sessions: a random session ID, a one-way hash of your sign-in token, and when the session was issued, expires or was ended. We do not record your IP address, browser or device.
• Credits: your balance, the credits granted to you, credits reserved for requests in progress, and an entry for every grant, charge and expiry, with its amount and time.
• Requests: for each chat request, a request ID, your address, the model, the credit estimate, the outcome (completed, blocked, cancelled or failed) and the time. Not the prompt or the reply.
• On-chain activity: we read public blockchain data about the allwit contracts, such as stakes and unstakes linked to your address, to grant staking credits.
• Service logs: method, route and response status of requests to our services. Sign-in tokens, signatures and similar secrets are removed before anything is logged, and we do not log IP addresses or request headers.
• Messages you send us: if you email us, we keep your message and address to reply.

Signing in asks your wallet to sign a message. It is not a transaction and costs no gas. We keep the signature only long enough to check it.

When you send a chat message, your browser sends the conversation to our gateway. The gateway checks your session, runs our content filter, reserves credits and records the request. It then passes the conversation, without your wallet address or session, to a separate relay that has no access to accounts. The relay sends it to the model provider and streams the reply back.

The model provider sees the content of your conversation, so do not include information you would not want a third party to process. Today our gateway handles both your session and your prompt while it serves a request. Anonymous credit tokens and an oblivious relay, which would remove that link, are in development. We will update this policy when they ship.

Prompts and replies are processed in memory. They are not written to our databases or logs, and our content filter does not keep them.

Your chat history is saved only in your browser (see the cookie policy). You can delete it at any time.

• To provide allwit: signing you in, keeping your session, keeping your credit balance, and serving your requests. This is necessary to perform our agreement with you.
• To keep allwit safe and working: preventing abuse, enforcing the terms of service, and fixing faults. This is in our legitimate interest in running a secure service.
• To meet legal obligations, for example keeping financial records or responding to lawful requests.

• Model providers: currently Groq. They receive the content of your conversations (not your wallet address) and handle it under their own terms and privacy policy.
• Hosting providers: Vercel hosts the website and Railway hosts our services and databases. Like any network operator they may see IP addresses when your browser connects.
• Blockchain nodes: your browser reads blockchain data from a public Ethereum node, and your wallet sends your transactions to the network. Our services also read from Ethereum nodes.
• WalletConnect: if you connect with WalletConnect, Reown (the provider of WalletConnect) relays the connection between this site and your wallet app.
• Authorities, where the law requires us to disclose information.

We do not sell personal data or share it for advertising.

Staking, unstaking, auction bids and other on-chain actions are recorded on Ethereum, which is public and permanent. Anyone can see them together with your address. We cannot change or delete blockchain records.

• Sign-in codes: 5 minutes, or until used.
• Records of ended sessions used to block old sign-in tokens: 15 minutes.
• Sessions expire 7 days after your last sign-in or refresh. The session record itself is kept with your account records.
• Account, credit and request records: for as long as we run allwit, for accounting, preventing abuse and resolving disputes. The credit ledger is append-only, so its entries are not edited or removed. We have no automatic deletion schedule yet and will publish one in this policy.
• Emails: as long as needed to deal with your request.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. You can also complain to your data protection authority.

To make a request, email hello@allwit.xyz with your wallet address. Because we have no other way to identify you, we will ask you to prove that you control the address, for example by signing a message. We will not ask for your private key or seed phrase, ever.

Some records cannot be deleted: entries we must keep by law, the append-only credit ledger, and anything on a public blockchain.

Some data stays in your browser and never reaches us: your chat history, sealed auction bid details and your theme. The cookie policy lists everything and explains how to remove it.

Our providers may process data in the United States and other countries. Where the law requires it, we rely on safeguards such as standard contractual clauses.

allwit is not intended for anyone under 18, and we do not knowingly collect data from them.

Sign-in tokens are short-lived, stored only as hashes, and rotated on every use. Services talk to each other over authenticated connections, and secrets are removed from logs. No system is perfectly secure, and you are responsible for keeping your wallet and its keys safe.

We will update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we will say so on the site before it takes effect.

Questions or requests about privacy: hello@allwit.xyz.